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Fig. 10D 
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CD 



IDENTIFY THE COMPONENTS OF 
THE STERILIZER 181 THAT ARE 
REQUIRED TO BE OPERABLE 
FOR SAFE OPERATION. 
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ALLOW ACTIVATION AND/OR 
RECONFIGURATION OF THE 
STERILIZER 181. 




DOES THE SAFETY CONTROLLER 1436 INDICATE THAT IS SAFE TO 
(RE)ACTIVATE OR RECONFIGURE ALL COMPONENTS OF THE 
SURFACE STERILIZER 181 THAT ARE CURRENTLY INACTIVE OR IN 
AN UNDESIRABLE STATE, BUT PREFERRED/NEEDED FOR SAFE 
OPERATION OF STERILIZER 181? 

ALERT OPERATOR AND/OR ACTIVATE 
ONE OR MORE ALARMS REGUARDING 
THE COMPONENTS OF THE SURFACE 
STERILIZER 181 THAT CAN NOT BE 
SAFELY ACTIVATED OR RECONFIGURED 
AS REOUESTED. 



SAFETY CONTROLLER 
WAITS FOR AN INPUT 



1436 



LOG DATA FROM THE SAFETY CONTROL- 
LER INDICATING WHY COMPONENTS 
WERE NOT ACTIVATED/RECONFIGURED. 
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LOG THE INPUT RECEIVED. 



LOG THE ACTION(S) TAKEN. 
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SAFETY CONTROLLER 
1436 WAITS FOR AN 
INPUT 



IF ACTIVE, SHUTDOWN THE FOOD 
STERILIZATION PROCESS. 
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ACTIVATE APPROPRIATE 
ALARM(S) AND/OR NOTIFY AN 
OPERATOR.. 



CD— 



1840 



3 




USE THE INPUT TO 
CHANGE 
STERILIZER 181 
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STOP THE FLOW OF THE FOOD 
PRODUCT 115 INTO THE 
SURFACE STERILIZER 181. 
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IS THE INPUT TO REQUEST FOR 
CHANGING A CONFIGURATION 
OF THE SURFACE STERILIZER 
181. OR FOR INFORMATION? 
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DOES THE SAFETY CONTROLLER 1436 RECEIVE 
A SENSOR SIGNAL INDICATIVE OF AN 
ANOMALOUS EVENT THAT CAN NOT 
AUTOMATICALLY WHILE STERILIZING? 

DOES THE SAFETY CONTROLLER 
1436 RECEIVE A SIGNAL 
INDICATIVE OF A CORRECTION 
OF AN ANOMALOUS EVENT? 

DOES THE SAFETY 
CONTROLLER 1436 RECEIVE AN 
INPUT FROM AN OPERATOR? 
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ROUTE THE REQUESTED 
CHANGES TO THE 
SUBMODULE(S) OF THE 
CONTROLLER 1400 THAT 
HAVE RESPONSIBILITY FOR 
PERFORMING THE CHANGES. 
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OPERATOR 
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DOES THE SAFETY CONTROLLER 
1436 RECEIVE AN INPUT FROM 
ANOTHER SUBMODULE OF THE 
CONTROLLER 1400 NOT 
INITIATED BY AN OPERATOR? 



IS THE REQUESTED 
CHANGE(S) SAFE? 



NOTIFY OPERATOR. 



IS THE CHANGE ACCEPTABLE 
TO AN OPERATOR? 



PERFORM THE REQUEST. 
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IS THE INPUT FOR A 

CONFIGURATION 

CHANGE? 
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Fig. 15b 
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